CVE-2022-3034

Publication date 1 September 2022

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

4.3 · Medium

Score breakdown

When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn’t display the document. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.

Status

Package Ubuntu Release Status
thunderbird 23.04 lunar
Not affected
22.10 kinetic Ignored end of life, was needs-triage
22.04 LTS jammy
Fixed 1:102.2.2+build1-0ubuntu0.22.04.1
20.04 LTS focal
Fixed 1:102.2.2+build1-0ubuntu0.20.04.1
18.04 LTS bionic
Fixed 1:102.2.2+build1-0ubuntu0.18.04.1
16.04 LTS xenial Ignored end of standard support
14.04 LTS trusty Ignored end of standard support

Severity score breakdown

Parameter Value
Base score 4.3 · Medium
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality None
Integrity impact Low
Availability impact None
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References

Related Ubuntu Security Notices (USN)

    • USN-5663-1
    • Thunderbird vulnerabilities
    • 7 October 2022

Other references